IN THE SPECIFICATION 

Please amend the paragraphs beginning at page 5, line 24 as follows: 

To accomplish the above object, Applicants disclose an a first IP communication network 
system , apparatus and method according to the present invention. The IP communication 
network system comprises according to th e pres e nt inv e ntion comprising a plurality of 
autonomous systems, configuring IP networks of domains independent of each other, for 
performing interior- and exterior-forwarding of IP packets. The plurality of autonomous systems 
include a plurality of border relay devices positioned at borders between the IP networks. Each 
of the plurality of border relay devices includes a discarding unit for discarding, if the IP packet 
forwarded is an unauthorized intrusion packet, this unauthorized packet when detecting a re- 
intrusion on the basis of filtering information for detecting the re-intrusion of the unauthorized 
packet, and a distribution unit for distributing the filtering information to all other border relay 
devices within the same autonomous system. 

In a second IP communication n e twork s yst e m according to the present invention, a A 
host computer of each of the plurality of autonomous systems includes a detection unit for 
detecting based on predetermined items of judging information that the IP packet forwarded is 
the unauthorized intrusion packet. Once detected. In a third IP communication network syst e m 
according to th e pr e s e nt inv e ntion , the distribution unit of the border relay device further 
distributes the filtering information to the border relay device within the autonomous system 
facing to the autonomous system from which the unauthorized packet is forwarded. 

In a fourth IP communication network system according to th e present invention, each of 
a plurality of r e lay d e vic e s position e d at relay points b e tw ee n the r e spective IP networks of th e 
plurality of autonomous syst e ms A border relay device in the autonomous system includes a 
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discarding unit for discarding, if the IP packet forwarded is an unauthorized intrusion packet, this 
unauthorized packet when detecting a re-intrusion on the basis of filtering information for 
detecting the re-intrusion of the unauthorized packet; and a distribution unit for distributing the 
filtering information to all the relay devices within the same autonomous system. 

A first bord e r relay d e vic e according to th e pres e nt inv e ntion, is positioned at a border 
betw ee n autonomous systems, configuring IP n e tworks of independ e nt domains, for p e rforming 
int e rior - and exterior - forwarding of an IP packet. The bord e r r e lay d e vice comprises a 
discarding unit for discarding, if the IP pack e t forward e d is an unauthorized intrusion pack e t, this 
unauthoriz e d pack e t when det e cting a r e- intrusion on th e basis of filtering information for 
detecting th e r e- intrusion of the unauthoriz e d packet, and a distribution unit for distributing th e 
filt e ring information to all oth e r bord e r r e lay devic e s within the autonomous syst e ms. 

In a second bord e r r e lay d e vic e according to the present inv e ntion, the distribution unit 
further distribut e s th e filtering information to th e bord e r r e lay d e vic e position e d at a bord e r 
within th e autonomous syst e m facing to the autonomous system from which th e unauthoriz e d 
pack e t is forwarded. 

A first unauthoriz e d intrusion safeguard m e thod according to th e pr e s e nt invention in an 
IP communication n e twork syst e m having a plurality of autonomous syst e ms, configuring IP 
networks of ind e p e ndent domains of e ach other, for performing int e rior - and exterior - forwarding 
of IP packets, the m e thod in e ach of th e plurality of autonomous systems, compris e s a st e p of 
d e t e cting that th e IP packet forward e d is an unauthoriz e d intrusion pack e t on th e basis of 
predetermined items of judging information, a step of discarding th e unauthorized packet at one 
border of th e IP n e twork wh e n d e t e cting a r e intrusion on the basis of filt e ring information for 
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detecting th e r e intrusion of th e unauthoriz e d pack e t, and a st e p of distributing th e filt e ring 
information to all oth e r bord e r r e lay d e vices within the sam e autonomous syst e m. 

A s e cond unauthoriz e d intrusion saf e guard m e thod according to th e pr e s e nt inv e ntion 
may furth e r compris e a st e p of distributing th e filtering information to th e border within th e 
autonomous syst e m facing to th e autonomous syst e m from which the unauthoriz e d packet is 
forwarded. 

A third unauthoriz e d intrusion saf e guard m e thod according to the pr e s e nt inv e ntion may 
further, in e ach of th e plurality of autonomous syst e ms, comprise a st e p of discarding, wh e n th e 
IP packet forward e d is an unauthoriz e d intrusion pack e t, th e unauthorized packet at one bord e r 
of the IP n e twork wh e n det e cting a r e intrusion on the basis of filtering information for detecting 
the re intrusion of the unauthoriz e d packet, and a st e p of distributing th e filtering information to 
all oth e r relay points within th e sam e autonomous syst e m. 

A fourth authoriz e d intrusion saf e guard method according to the pr e s e nt inv e ntion 
compris e s a step of discarding, if an IP packet forward e d is an unauthorized intrusion pack e t, this 
unauthoriz e d pack e t when d e t e cting a re intrusion on th e basis of filt e ring information for 
d e t e cting the re intrusion of the unauthorized pack e t at a bord e r b e tw ee n autonomous systems, 
configuring IP networks of independ e nt domains, for p e rforming interior - and exterior 
forwarding of th e IP packet, and a step of distributing th e filt e ring information to all oth e r 
borders within th e autonomous systems. 

A fifth authoriz e d intrusion safeguard m e thod according to th e pr e s e nt invention may 
further comprise a st e p of distributing the filt e ring information to a bord e r within th e 
autonomous syst e m facing to th e autonomous system from which th e unauthoriz e d pack e t is 
forwarded. 
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